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1. A microelectronic apparatus for performing ® multiplication and squaring 

in both polynomial based GF(2^) and GF(p) field arithmetic, squaring and reduction 
using a serial fed radix 2^ multiplier, with k character multiplicand segments, A{, and 

a k character © accumulator wherein reduction to a limited congruence is performed "on 
the fly", in a systolic manner, with Ai, a multiplicand, times B, a multiplier, over a 
modulus, A^, and a result being at most 2A: + 1 characters long, including the k first 
emitting disregarded zero characters, which are not saved, where k characters have no 
less bits than the modulus, the apparatus comprising; 

a first (B), and second main memory register means, each register operative 
to hold at least n bit long operands, respectively operative to store a multiplier value 
designated S, and a modulus, denoted A^, wherein the modulus is smaller than 2"; 

a digital logic sensing detector, Yb? operative to anticipate "on the fly" when a 
modulus value is to be © added to the value in the © adder accumulator device such that all 
first k characters emittmg from the device are forced to zero; 

a modular multiplying device for at least k character input multiplicands, 
with only one, at least k characters long © adder, © summation device operative to 
accept k character multiplicands, the ® multiplication device operative to switch into 
the © accumulator device, in turn, multiplicand values, and in turn to receive multiplier 
values from a B register, and an "on the fly" simultaneously generated anticipated value 
as a multiplier which is operative to force k first emitting zero output characters in the 
first phase, wherein at each effective machine cycle at least one designated multiplicand 
is © added into the © accumulation device; 

the multiplicand values to be switched in turn into the © accumulation 
device consisting of one or two of the following three multiplicands, the first 
multiplicand being an all-zero string value, a second value, being the multiplicand Aj, 
and a third value, the A^o segment of the modulus; 

an apparatus to anticipate the /bit k character serial input Fq multiplier 

values; 



47 



the multiplier values which are input in turn into the multiplying device in 
the first phase being first the B operand, and concurrently, the second multiplier value 
consisting of the Yq, "on the fly" anticipated k character string, to force first emitting 
zeroes in the output; 

an ® accumulation device, operative to output values simultaneously as 
multiplicands are © added into the © accumulation device; 

an output transfer mechanism, in the second phase operative to output a 
final modular ® multiplication result from the © accumulation device. 

2. An apparatus as in claim 1 wherein ® summations into the © accumulation 
device are activated by each new serially loaded higher order multiplier characters. 

3. An apparatus as in claim 1, wherein the multiplier characters; 

are operative to cause no © summation into the © accumulation device if 
both the input B character and the corresponding input Yq character are zeroes; 

are operative to © add in only the A{ multiplicand if the input B character is 
a one and the corresponding Yq character is a zero; 

are operative to © add in only the N, modulus, if the B character is a zero, 
and the corresponding Yo character is a one; and 

are operative to © add in the © summation of the modulus, A^, with the 
multiplicand A\ if both the B input character and the corresponding Yo character are 
ones. 

4. An apparatus as in claim 1, operative to preload multiplicand values A{ and 
N, into two designated preload buffers, and to ©summate these values into a third 
multiplicand preload buffer, obviating the necessity of © adding in each multiplicand 
value separately. 

5. An apparatus as in claim 1, wherein the multiplier values are serial single 
character in input and the output of the © accumulation device is serial single character 
output, wherein the Yo detect device is operative to anticipate only one character in a 
clocked turn. 
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6. An apparatus as in claim 1, wherein the © accumulation device performs 
modulo 2, XOR addition/subtraction, wherein all carry bits in addition and subtraction 
components are disregarded, thereby precluding provisions for overflow and further 
limiting convergence in computations, 

7. A ® multiplication apparatus as in claim 1 wherein all carry inputs are 
disabled to zero, denoted, ^=0, typically operative to perform polynomial based 
multiplication. 

8. An apparatus as in claim 1 wherein an if equal to zero acting on an element 

in a circuit equation computing in GF(2^), the if designates omitted circuitry and all 

adders and subtractors, designated ® have been reduced to XOR, modulo 2 
addition/subtraction elements. 

9. An apparatus as in claim 1 wherein k first emitting zeroes will egress from 
the device controlled by the following four quantities in anticipating the next in turn Yq 
character; 

i. the / bit 5out bits of the result of the / bit by / bit mod 2^ ® 

multiplication of the right-hand character of the A-, register times the character of the 
B Stream, Ao-5d mod 2\ 

ii. the first emitting carry out character from the © accumulation device, 

^(COo); 

iii. the / bit 5out character from the second from the right character 
emitting cell of the © accumulation device, 50i; 

iv. the /bit /o value, which is the negative multiplicative inverse of the 
right-hand character in the Nq modulus multiplicand register. 

wherein values, Ao^B^ mod 2\ if{COo\ and SOi are © added character to character 
together and "on the fly" multiplied by the Jo character to output a valid Yq zero-forcing 
anticipatory character to force an /bit egressing string of zeroes, 
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10. An apparatus as in claim 1, wherein ® multiplication on polynomial based 
operands is performed in a reverse mode, multiplying from right hand MS characters to 
left hand LS characters, operative to perform modular reduced ® multiplication without 
Montgomery type parasitic functions, 

11. An apparatus as in claim 1 where the preload buffers are serially fed and 
where multiplicand values are preloaded into the preload buffers on the fly from a 
multiplicity of memory devices. 

12. An apparatus as in claim 1, wherein a previous value, emitting from an 
additional n bit register, 5, is ® summated into the output value of the © accumulation 
device via an /bit ® adder circuit such that first emitting output characters are zeroes 

when the Yq detector is operative to detect the necessity of © adding moduli to the 
© summation in the © accumulation device, wherein the Yq detector is operative to 
detect utilizing the next in turn © added characters Ao-jBd mod 2\ if(COo% 50i, 5d and 
y(COz), the composite of © added characters to be finite field ® multiplied on the fly 
by the /bit Jo value, where ffi defines the addition and ® defines the multiplication as 
befits the finite field used in the process. 

13. An apparatus as in claim 1, wherein for /= 1, Jo is implicitly 1, and the Jq 
® multiplication is implicit, without additional hardware. 

14. An apparatus as in claim 1 wherein a comparator is operative to sense a 
finite field output from the ® modular multiplication device, working in GF(p), where 
the first right hand emitting k zero characters are disregarded, where the output is larger 
than the modulus, N, thereby operative to control a modular reduction whence said 
value is output from the memory register to which the output stream from the multiplier 
device is destined, and thereby precluding allotting a second memory storage device for 
the smaller product values. 
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15. A device as in claim 1 wherein for ® modular multiplication in the GF(2% 
the apparatus is operative to multiply without an externally precomputed more than /bit 
zero-forcing factor. 

16. A method according to claim 1 operative to compute a Jo constant by resetting 
either the A operand value or the B operand value to zero and setting the partial result 
value, So, to 1. 

17. A microelectronic apparatus for performing interleaved finite field ® modular 
multiplication of integers A and B operative to generate an output stream of A times B 
modulus wherein n the number of characters in the modulus operand register is larger 
than k, wherein the ® multiplication process is performed in iterations, wherein at each 
interleaved iteration with operands input into a ® multiplying device, consisting of N, 
the modulus, S, a multiplier, a previously computed partial result, 5, and a k character 
string segment of A, a multiplicand, the segments progressing from the Ao string 
segment to the Am-i string segment, wherein each iterative result is © summated into a 
next in turn S, temporary result, in turn, wherein first emitting characters of iterative 
results are zeroes, the apparatus comprising: 

first {B% second (S) and third (TV) main memory registers, each register capable of 
storing and outputting operands, respectively operative to store a multiplier value, a partial 
result value and a modulus, also denoted iV; 

a modular multiplying device operative to 0 summate into the © accumulation 
device, in turn one or two of a plurality of multiplicand values, in turn, during the 
phases of the iterative ® multiplication process, and in turn to receive as multipliers, in 
turn, inputs from a first value B register, second, from an "on the fly" anticipating value, 
Yo, as a multiplier to force first emitting right-hand zero output characters in each 
iteration, and third values from the modulus, N, register; 

the multiplicand parallel registers operative at least to receive in turn, values 
from the A, B, and N register sources, and in turn, also a multiplicand zero forcing Yq, 
value; 
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a first emitting zero forcing Yq detect device operative to generate a binary 
string operative to be a multiplier during the first phase and operative to be a 
multiplicand in the second phase; 

multiplicand values to be switched into the accumulation device for the first 
phase consisting of a first zero value, a second value, Ai, which is a A: character string 
segment of a multiplicand, A, and a third value No, being the first emitting k characters 
of the modulus, N\ 

a temporary result value, 5, resulting from a previous iteration, operative to 
be summated with the value emanating from the accumulation device, to generate a 
partial result for the next in turn iteration; 

multiplicand values to be input, in turn, into the accumulation device for the 
second phase being, a first zero value, a second Ai operand, remaining in place from the 
first phase, and a third Yq value having been anticipated in the first phase; 

multiplier values input into the multiplying device in the first phase being a 
first emitting string, Bo, being the first emitting string segment of the B operand, 
concurrently multiplying with the second multiplier value consisting of the anticipated 
Yo string which is simultaneously loaded character by character as it is generated into a 
preload multiplicand buffer for the second phase; 

the two multiplier values input into the apparatus during the second phase 
being the left hand n - k character values from the B operand, designated B, and the left 
hand n - k characters of the A'^ modulus, designated N, respectively; and 

a multiplying flush out device operative in the last phase to transfer the left 
hand segment of a result value remaining in the accumulation device into a result 
register. 

18. An apparatus as in claim 17, wherein multiplication on polynomial based 
operands is performed in a reverse mode, multiplying from MS characters to LS 
characters, operative to perform modular reduction without Montgomery type parasitic 
functions. 

19. An apparatus operative to anticipate the Yo value using first emitting values of 
the multiplicand, and present inputs of the B multiplier, carry out values from 
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the accumulation device, summation values from the accumulation device, the present 
values from the previously computed partial result, and carry out values from the adder 
which summates the result from the accumulation device with the previous partial 
result. 

20. An apparatus as in claim 19 wherein k first emitting zeroes will egress from the 
device controlled by the following six quantities in anticipating the next in turn Yb 
character: 

i. the /bit 5out bits of the result of the /bit by /bit mod 2^ multiplication of 

the right-hand character of the A{ register times the character of the B Stream, Ao^B^ 

mod 2'^; 

ii. the first emitting carry out character from the accumulation device, 

^(COo); 

iii. the / bit 5out character from the second from the right-hand character 
emitting cell of the accumulation device, ^Oi; 

iv. the next in turn character value from the 5 stream, 

V. the / bit carry out character from the Z output full adder, ^(COz); 

vi. the /bit Jo value, which is the negative multiplicative mverse of the right- 
hand character in the Nq modulus multiplicand register; 

wherein values, Ao-5d mod 2^ if{COo\ SOu Sd are added character to character together 
and "on the fly" multiplied by the Jq character to output a valid Yo zero-forcing 
anticipatory character to force an / bit egressing character string of zeroes. 

21. An apparatus as in claim 17 comprised of at least one sensor operative to 
compare the output result to N, the modulus, the mechanism operative to actuate a 
second subtracter on the output of the result register, thereby to output a modular 
reduced value which is limited congruent to the output result value precluding the 
necessity to allot a second memory storage for a smaller result. 
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22. An apparatus as in claim 17 where a value which is a summation of two 
multiplicands is loaded into a preload character buffer with at least a k characters 
memory means register concurrently whilst one of the values is loaded into a preload 
buffer. 

23. An apparatus with only one accumulation device, and an anticipating zero 
forcing mechanism operative to perform a series of interleaved modular multiplications 
and squarings concurrently performing the equivalent of three natural integer 
multiplication operations, such that a result is an exponentiation. 

24. An apparatus as in claim 17 where next in turn used multiplicands are 
preloaded into preload register buffer means on the fly. 

25. An apparatus as in claim 17 where a value which is a summation of two 
multiplicands is summated into at least a k character register concurrently whilst one of 
the values is loaded into its preload buffer. 

26. An apparatus as in claim 17 wherein apparatus buffers and registers are 
operative to be loaded with values from external memory sources and said buffers and 
registers are operative to be unloaded into the external memory source during 
computations, such that the maximum size of the operands is dependent on available 
memory means. 

27. An apparatus as in claim 17 wherein memory register means are typically serial 
single character in/serial single character out, parallel at least k characters in/parallel at 
least k characters out, serial single character in/parallel at least k characters out, and 
parallel k characters in/serial single character out. 

28. An apparatus as in claim 17 wherein the final phase of a multiplication type 
iteration, the multiplier inputs are zero characters operative to flush out the left hand 
segment of the carry save accumulator memory. 
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29. An apparatus as in claim 17 where next in turn used multiplicands are 
preloaded into preload memory buffers on the fly. 

30. An apparatus as in claim 17 where multiplicand values are preloaded into the 
preload buffers on the fly from central storage memory means. 
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